Processing method and device based on hierarchical state machine user access rights

By introducing a multi-layer permission judgment method based on hierarchical state machine in access permission control, the problem of incomplete access permission control in the existing technology is solved, and more accurate and flexible user permission management is achieved.

CN115080940BActive Publication Date: 2025-03-25CHINA UNITED NETWORK COMM GRP CO LTD
1 Cites 0 Cited by

Patent Information

Application Number
CN202210780040.7
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2022-07-04
Publication Date
2025-03-25
Estimated Expiration
2042-07-04

AI Technical Summary

Technical Problem

In the prior art, access rights control is not comprehensive, resulting in excessive or small user rights, and the user access rights cannot be accurately and flexibly controlled.

Method used

Using a hierarchical state machine-based method, by obtaining user identification and operation request description information, analyzing and empowering processing, permission description information is generated, including role permissions, functional permissions and data permissions. Then, using a multi-layer state machine corresponding to the functional permissions, role, function and/or data permission judgment is made on the permission description information, determine whether the user can perform a specific operation, and generate a response result.

Benefits of technology

Through the comprehensive permission judgment of multi-layer state machines, the problem of excessive or too small user permission range is avoided, and more accurate and flexible user permission control is achieved.

✦ Generated by Eureka AI based on patent content.
Patent Text Reader

Abstract

The present application provides a method and device for processing user access rights based on a hierarchical state machine. By obtaining an access operation request, including: user identification and operation request description information; according to the access operation request, the user identification and operation request description information are analyzed and authorized to obtain the permission description information corresponding to the user identification, including: role permission information, function permission information to be requested, and data permission information to be requested; using a multi-layer state machine corresponding to the function permission information to be requested, the permission description information is judged on the role, function and / or data permission to determine whether the user corresponding to the user's identification can perform the operation corresponding to the operation request description information, and generate a corresponding response result. Compared with the prior art, the present application comprehensively determines the user's permissions based on role permissions, function permissions and data permissions, so that the permission determination result is more flexible and accurate.
Need to check novelty before this filing date? Find Prior Art